$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: v5RjSmLosPKUJ7Lh2w6/oLU9IVgA5vcJhj1dsJxyEJ0= Subject key identifier: E0:06:38:E1:41:11:15:53:BF:F5:57:EC:80:8C:89:70:57:F4:DC:D3 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 71B7D0B5032C7EADCE138CA074D09DEC53A27140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 0866 Signing time: Wed 25 Mar 2026 12:43:57 +0000 Manifest this update: Wed 25 Mar 2026 12:38:57 +0000 Manifest next update: Thu 26 Mar 2026 13:59:57 +0000 Files and hashes: 1: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=) 2: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=) 3: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=) 4: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=) 5: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=) 6: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=) 7: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: RZEaHnuUVfWpyNr0TCnOyJH53MhMgzrZ9nJ2YU9kVcw=) 8: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=) 9: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=) 10: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=) 11: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=) 12: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=) 13: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 13:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b7:d0:b5:03:2c:7e:ad:ce:13:8c:a0:74:d0:9d:ec:53:a2:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Mar 25 12:38:57 2026 GMT Not After : Mar 26 13:59:57 2026 GMT Subject: CN=E00638E141111553BFF557EC808C897057F4DCD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:8e:08:57:ba:25:57:2d:8c:ca:9b:d7:b2: f3:46:12:25:8d:f3:92:2f:5f:29:aa:3a:e0:cc:0f: 95:48:42:8d:f9:8b:7e:d9:a3:c6:99:d5:25:01:a7: 24:a5:d4:63:8c:7d:bd:61:4c:16:3d:70:6e:97:6c: 59:56:98:4f:12:d4:7d:56:b9:46:9e:f9:b1:77:37: 80:6e:bb:26:14:75:5c:f5:8d:20:b4:6c:02:41:3e: ae:3f:f0:fb:69:7c:e6:e7:7e:f2:9a:9a:53:b1:b3: fb:04:bb:bf:83:bf:62:28:bd:a2:6d:bc:a3:8e:ca: 14:48:eb:f9:97:57:ec:39:2c:29:9a:36:ae:0a:f9: ac:9a:71:61:a4:7f:06:25:bb:aa:2a:2b:4d:43:12: 31:21:5f:0a:71:3a:d2:a7:85:c7:c9:9c:8a:97:6d: a5:9b:c3:a8:39:d7:be:d1:88:5e:4f:69:2d:cf:c5: 9d:ba:12:62:f8:ab:f5:34:55:7f:2f:bc:36:a5:46: ec:98:cb:01:38:39:8c:8a:99:8c:47:30:1d:7f:6c: 32:c0:6d:3f:31:76:5e:a9:82:c0:93:7f:04:e8:21: 26:cd:3e:8b:86:42:33:42:85:39:5a:2e:32:9c:f4: db:93:b7:b0:b9:19:a4:7b:dc:48:76:a4:13:06:ef: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:06:38:E1:41:11:15:53:BF:F5:57:EC:80:8C:89:70:57:F4:DC:D3 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:17:eb:6b:f0:8e:d2:fc:1a:ce:48:79:34:30:18:aa:84:f1: 9c:68:20:eb:fa:05:de:7b:fb:52:26:15:ef:ac:e7:2a:1c:a4: f9:51:ca:65:01:75:ac:ae:99:66:96:17:45:ad:3f:aa:fe:ac: a0:2d:90:23:b1:8c:57:10:f8:9d:70:57:2e:99:1e:44:2f:28: eb:dc:85:c7:1b:5e:c3:65:28:e9:6f:42:7d:8f:08:80:05:07: 04:74:40:a3:e3:e3:bb:5e:7b:f8:15:86:41:9a:1e:27:30:36: 0b:4a:8e:2e:06:2b:c1:16:7d:4b:23:e8:d5:9f:a8:38:27:67: 88:2e:b7:04:e7:05:eb:c3:2a:d5:c2:6c:01:20:55:71:8f:18: 95:b4:47:bf:aa:5b:98:48:75:c9:6e:5d:d2:a0:c7:6e:f5:be: 41:76:22:14:23:19:ef:5f:8b:d0:97:d6:6c:e8:93:81:3b:3f: 5d:68:db:af:de:ba:90:f5:d1:61:9e:d9:97:cb:f8:3b:18:26: 3c:79:81:41:90:e9:d2:ca:57:78:9e:69:69:95:d0:10:18:fc: 7c:90:e4:11:91:31:e4:6a:94:54:4d:15:af:55:62:37:04:a3: c2:d8:5e:75:36:bf:1c:af:78:6b:c8:84:c7:b7:4d:57:b8:5b: f7:38:03:ec -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUcbfQtQMsfq3OE4ygdNCd7FOicUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDMyNTEyMzg1N1oX DTI2MDMyNjEzNTk1N1owMzExMC8GA1UEAxMoRTAwNjM4RTE0MTExMTU1M0JGRjU1 N0VDODA4Qzg5NzA1N0Y0RENEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANarjghXuiVXLYzKm9ey80YSJY3zki9fKao64MwPlUhCjfmLftmjxpnVJQGn JKXUY4x9vWFMFj1wbpdsWVaYTxLUfVa5Rp75sXc3gG67JhR1XPWNILRsAkE+rj/w +2l85ud+8pqaU7Gz+wS7v4O/Yii9om28o47KFEjr+ZdX7DksKZo2rgr5rJpxYaR/ BiW7qiorTUMSMSFfCnE60qeFx8mcipdtpZvDqDnXvtGIXk9pLc/FnboSYvir9TRV fy+8NqVG7JjLATg5jIqZjEcwHX9sMsBtPzF2XqmCwJN/BOghJs0+i4ZCM0KFOVou Mpz025O3sLkZpHvcSHakEwbvYeUCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBTgBjjh QREVU7/1V+yAjIlwV/Tc0zAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAxhfra/CO0vwazkh5NDAYqoTxnGgg6/oF3nv7UiYV 76znKhyk+VHKZQF1rK6ZZpYXRa0/qv6soC2QI7GMVxD4nXBXLpkeRC8o69yFxxte w2Uo6W9CfY8IgAUHBHRAo+Pju157+BWGQZoeJzA2C0qOLgYrwRZ9SyPo1Z+oOCdn iC63BOcF68Mq1cJsASBVcY8YlbRHv6pbmEh1yW5d0qDHbvW+QXYiFCMZ71+L0JfW bOiTgTs/XWjbr966kPXRYZ7Zl8v4OxgmPHmBQZDp0spXeJ5paZXQEBj8fJDkEZEx 5GqUVE0Vr1ViNwSjwthedTa/HK94a8iEx7dNV7hb9zgD7A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:48:47 2026 by rpki-client